The Data Access Expiration Control Tower

 Build a production-minded web application that tracks temporary access to sensitive systems, files, repositories, and business tools.

The application must include:

1. Access Registry: Record the person, resource, permission level, business justification, approver, start date, expiration date, and current status.

2. Expiration Intelligence: Identify access that expires soon, has already expired, or has no defined expiration.

3. Risk Scoring: Calculate risk using permission sensitivity, access duration, resource criticality, and approval status. Explain every score.

4. Approval Workflow: Support request, approval, rejection, extension, and revocation states.

5. Evidence Timeline: Maintain an append-only audit history of changes, including actor, timestamp, and reason.

6. Exception Detection: Flag conflicting approvals, orphaned access records, and permissions that exceed the original request.

7. Reports: Export overdue access, upcoming expirations, and unresolved exceptions to CSV.

Build a responsive interface with filters, searchable tables, detail drawers, and a risk overview. Include realistic demo data, validation, tests, and clear empty states.

Treat the registry as a planning and monitoring system unless connected to an authorized identity provider. Never claim that permissions have actually been revoked unless the external system confirms it. Enforce server-side authorization and protect audit records from ordinary user modification.